Back to HomePulse

Privacy Policy

Last updated: February 5, 2026

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Spanish Organic Law 3/2018 on Personal Data Protection.

1. Data Controller

The data controller responsible for your personal data is:

SnowStorm Solutions S.L.

NIF: B87637211

C/Gustavo Adolfo Becquer 11

Ugena, Toledo, Spain

Contact: support@pulsecloud.ai

2. Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Account Information

  • Email address
  • Name (if provided)
  • Password (encrypted)
  • Account preferences and settings

2.2 Usage Data

  • Conversation history with AI assistants
  • Files and documents you upload
  • Integration connection status
  • Feature usage statistics

2.3 Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Log data and timestamps

2.4 Payment Data

  • Billing information (processed by Stripe)
  • Transaction history
  • Subscription status

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Contract Performance (Art. 6(1)(b))

Processing necessary to provide you with our services, manage your account, and fulfill our contractual obligations.

Legitimate Interests (Art. 6(1)(f))

Processing necessary for our legitimate interests, such as improving our services, security, and fraud prevention.

Consent (Art. 6(1)(a))

Where you have given explicit consent, such as for marketing communications or optional features.

Legal Obligation (Art. 6(1)(c))

Processing required to comply with legal obligations, such as tax and accounting requirements.

4. How We Use Your Data

We use your personal data to:

  • Provide, maintain, and improve our AI assistant services
  • Process your transactions and manage your subscription
  • Send you service-related communications
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve user experience
  • Detect, prevent, and address security issues
  • Comply with legal obligations

5. Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

5.1 AI Service Providers

When you use AI features, your prompts and conversations may be processed by third-party AI providers (OpenAI, Anthropic, Google, etc.) according to their respective privacy policies. We recommend reviewing their privacy practices.

5.2 Infrastructure Providers

  • Amazon Web Services (AWS) - Cloud hosting (EU-West-1 region)
  • Stripe - Payment processing
  • Amazon Cognito - Authentication services

5.3 Connected Integrations

When you connect third-party services (Google, Notion, Slack, etc.), data may be shared with those services according to your explicit authorization and their privacy policies.

We never sell your personal data to third parties.

6. International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA) using AWS servers in the EU-West-1 (Ireland) region.

When data is transferred outside the EEA (e.g., to AI providers in the United States), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission
  • EU-U.S. Data Privacy Framework certification (where applicable)

7. Data Retention

We retain your personal data for the following periods:

  • Account data: For the duration of your account plus 30 days after deletion request
  • Conversation history: Until you delete it or close your account
  • Uploaded files: Until you delete them or close your account
  • Transaction records: 7 years (legal requirement)
  • Log data: 90 days

8. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

Right of Access (Art. 15)

Request a copy of the personal data we hold about you.

Right to Rectification (Art. 16)

Request correction of inaccurate or incomplete data.

Right to Erasure (Art. 17)

Request deletion of your personal data ("right to be forgotten").

Right to Restriction (Art. 18)

Request limitation of processing of your data.

Right to Data Portability (Art. 20)

Receive your data in a structured, machine-readable format.

Right to Object (Art. 21)

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent (Art. 7)

Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at . We will respond within 30 days as required by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Secure authentication using AWS Cognito
  • Regular security assessments and penetration testing
  • Access controls and audit logging
  • Employee security training and confidentiality agreements

10. Cookies and Tracking

We use essential cookies necessary for the functioning of our service. These include:

  • Authentication cookies to keep you logged in
  • Preference cookies to remember your settings
  • Security cookies to protect against unauthorized access

We do not use third-party advertising or tracking cookies. Any analytics we collect are anonymized and aggregated.

11. Children's Privacy

Pulse is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our service. We encourage you to review this policy periodically.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Spain, this is:

Agencia Española de Protección de Datos (AEPD)

C/Jorge Juan, 6

28001 Madrid, Spain

Website: www.aepd.es

14. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights:

SnowStorm Solutions S.L.

NIF: B87637211

C/Gustavo Adolfo Becquer 11

Ugena, Toledo, Spain

Email: support@pulsecloud.ai